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DEC's business and technology objectives require a strong research program. The 
Systems Research Center (SRC) and three other research laboratories are committed 
to filling that need. 

SRC began recruiting its first research scientists in 1984 — their charter, to advance 
the state of knowledge in all aspects of computer systems research. Our current 
work includes exploring high-performance personal computing, distributed com- 
puting, programming environments, system modelling techniques, specification 
technology, and tightly-coupled multiprocessors. 

Our approach to both hardware and software research is to create and use real 
systems so that we can investigate their properties fully. Complex systems cannot be 
evaluated solely in the abstract. Based on this belief, our strategy is to demonstrate 
the technical and practical feasibility of our ideas by building prototypes and using 
them as daily tools. The experience we gain is useful in the short term in enabling 
us to refine our designs, and invaluable in the long term in helping us to advance the 
state of knowledge about those systems. Most of the major advances in information 
systems have come through this strategy, including time-sharing, the ArpaNet, and 
distributed personal computing. 

SRC also performs work of a more mathematical flavor which complements our 
systems research. Some of this work is in established fields of theoretical computer 
science, such as the analysis of algorithms, computational geometry, and logics of 
programming. The rest of this work explores new ground motivated by problems 
that arise in our systems research. 

DEC has a strong commitment to communicating the results and experience gained 
through pursuing these activities. The Company values the improved understanding 
that comes with exposing and testing our ideas within the research community. 
SRC will therefore report results in conferences, in professional journals, and in 
our research report series. We will seek users for our prototype systems among 
those with whom we have common research interests, and we will encourage 
collaboration with university researchers. 
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Author's Abstract 

As an exercise in synchronization without mutual exclusion, algorithms are de- 
veloped to implement both a monotonic and a cyclic multiple-word clock that is 
updated by one process and read by one or more other processes. 



Capsule Review 

It is convenient for an operating system to maintain the system clock in shared 
memory, so it can be read directly by user processes, without a system call. But 
doing this is tricky if the clock has more than one word of precision, because 
the system may update the clock while a user process is partway through reading 
it. This paper presents a simple algorithm for maintaining the clock in shared 
memory that requires no locking or retries. Theorists will find the algorithm and 
its correctness proof interesting, while practitioners will find the algorithm useful 
and easy to implement. 

Tim Mann 
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1 Introduction 



In an asynchronous multiprocess system, consider a clock that is updated by one 
process and read by one or more other processes. The clock is represented as a 
sequence of digits, where reading or writing each digit is a separate operation. We 
seek an algorithm to guarantee that a process reads a correct clock value, even 
if the read is performed while the clock is being updated. A read that occurs 
while the clock is being changed from 11:57 to 12:04 is allowed to return any 
value between 11:57 and 12:04 (inclusive). However, it is not allowed to return 
values such as 11:04, 12:07, or 12:57, which could be obtained if no attempt were 
made to synchronize the reader and writer. The relevance of this problem to the 
implementation of a multiword clock in an operating system should be obvious. 

It is widely believed that this problem can be solved only by "locking" — that is, by 
using a mutual exclusion protocol to prevent the reader and writer from concurrently 
accessing the clock. This belief is wrong. Using the results of [1], I will derive 
a solution in which processes never wait. Such a solution is likely to be more 
efficient than one that uses locking. It is the goal of this paper not only to present 
a potentially useful algorithm, but also to remind readers that one can sometimes 
avoid the need for mutual exclusion by using the techniques of [1]. 

It is customary to assume that reading or writing a single digit is an atomic operation. 
The algorithms presented here and the theorems of [1] on which they are based are 
valid under the weaker assumption that each digit is, in the terminology of [2], a 
regular register. (The version of [1] submitted for publication assumed only regular 
registers, but the editor was afraid that the concept of nonatomic operations on 
individual digits might be considered heretical and insisted that it be removed from 
the paper.) However, readers who wish to ignore the subtle distinction between 
atomic and regular digits can simply think "atomic" when they read "regular". 

There are two different kinds of clocks — monotonic clocks that never decrease and 
cyclic clocks that cycle through a bounded set of values. Monotonic clocks are 
commonly used in operating systems to encode the date and time, while cyclic 
clocks that display the time of day are encountered in everyday life. I will first 
present an algorithm to implement a monotonic clock and then indicate how it can 
be extended to implement a cyclic clock. 
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2 Notation and Theorems 



To begin, let us recall the notations and results of [1]. Write operations to a data 
item v are assumed to be sequential; the sequence of values written to v is denoted 
by v [0] , . . . , where the write of precedes the write of v l ' +1 K The 0 th write, 
which initializes the value, is assumed to precede all reads. A read of v is said to 
see version v 1 ' 1 if the read ended after the write of v 1 ' 1 was begun and began before 
the write of v [,+1J ended. A read that is concurrent with a write will see more than 
one version. 

In a somewhat illogical but useful notation, for natural numbers k and / with k < I, 
let v lkJ1 denote both the value obtained by a read and the assertion that the read saw 
versions v [k] , v [k+l] , . . ., v [ ' 1 and no other versions. Thus, if a read obtains the value 
v {k ' l] , then either k — I and the read overlapped no writes, or k < I and the read 
overlapped the writes of v [k+l] , . . . , v l 'K 

A data item v is said to be regular if the value v [k ' l] obtained by a read equals v [,] 
for some i with k < i < I. This is a somewhat weaker condition than requiring 
that reads and writes of v be atomic. 

An m-digit data item v is a sequence V\ ■ ■ • v m of digits, where the left-most digit 
V\ is the most significant. The ranges of values of the v t need not all be the same; 
mixed-radix representations are allowed. A read or write of v consists of a single 
read or write of each digit, in any order. Thus, v [,i = v\ li ■ ■ ■ v^. A read or write 
of v is said to be from left to right if the digits are accessed in the order V\, v 2 , ■ ■ -, 
v m ; it is said to be from right to left if the digits are accessed in the opposite order. 
The following theorems and lemma are proved in [1]. (Theorem 2 will not be used 
here, but is included for completeness.) 

Theorem 1 If v — V\ ■ ■ ■ v m is always written from right to left, then a read from 
left to right obtains a sequence of values v [klM , . . ., v [km ' lm] with k\ < l\ < k 2 < 
< k < / 



Lemma Let v — V\ ■ ■ • v m and assume that v l0i < i> [1] < • • •. 

(a) Ifh<---< i m < i then • • • < v in . 

(b) Ifh>---> L > i then • • • v^ 1 > v [i K 
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Theorem 2 Let v — V\ • • • v m and assume that v m < < • • • and the digits v t 
are regular. 

(a) Ifv is always written from right to left, then a read from left to right obtains 
a value v lkJ1 < v 1 ' 1 . 

(b) Ifv is always written from left to right, then a read from right to left obtains 
a value v lkJl > v [k] . 

The reader who enjoys puzzles may wish to pause here and attempt his own 
implementation of a monotonic clock using regular digits. 



3 A Monotonic Clock 

A monotonic clock is a data item c — C\ • • -c m such that c l0] < c ll] < c l2] < • • •. 
The correctness condition for such a clock asserts that if a read obtains the value 
c [k ' 11 , then c [kl < c [kil] < c [l] . The individual digits c, are assumed to be regular. 

To implement a monotonic clock c, two copies c 1 and c2 of the clock are maintained. 
The writer updates c by first writing c2 from left to right and then writing c 1 from 
right to left. The reader first reads c 1 from left to right and then reads c2 from right 
to left. In the following analysis, we deduce what value the reader should return. 

Let rl and rl denote the values of cl and c2 read by the reader. By Theorem 1 
applied to the 2m-digitdata item cli • • • c\ m cl m ■ ■ -c2\, 

rl - cl [«..n.]... cl »Wi.] (1) 

rl = cl f^\... cl m^\ (2) 

with 

k\ x < /li < k\ 2 < • ■ ■ < kl m < l\ m 

< k2 m < I2 m < k2 m _i <---<k2 1 <l2 1 (3) 

The regularity assumption and (l)-(3) imply the existence of integers i q and j q 
such that 

rl = cl [ / l] ---cl^ ] (4) 

r2 - c2\ jil ■ • • c2 l J™ ] (5) 

and 

kli < h < • • • < i„ < j m < • • • < ji < I2i (6) 
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The definition of c [kJl implies that k < kl \ and ll\ < /, so a correct read is allowed 
to return any value in the interval [c l " J , c lilJ ]. 

Applying part (a) of the lemma to cl with i m substituted for i, and part (b) to cl 
with j m substituted for i, using (4) and (5), we get rl < cl 1 '"' 1 and c2 limJ < r2. The 
monotonicity assumption and (6) then imply 

rl < cl lim] < c2 Um] < rl (7) 

Monotonicity, (6), and the assumption that c 1 and cl are just two copies of c imply 

c m _ cl i/ij < cl ii„,i < cl \u\ < c2 ihi _ c U'i (8) 

If r 1 — rl, then (7) and (8) imply that the read can return the value r 1 , since it can 
return any value in the interval [c l " ] , c [jl] ]. Because (7) implies that rl < rl, we 
need now consider only the case of r 1 < rl. 

For 1 < q < m, let V\... q denote V\ ■ ■ ■ v q , and let V\... 0 — 0. Define v l q and v \ q 
to be the smallest and largest m-digit values w such that W\... q = V\... q . Thus, V\... q 
consists of the left-most q digits of v, and, if the are decimal digits, then v l q 
and v \ q are the values obtained by replacing the right-most m — q digits of v with 
0's or 9's, respectively. In general, we have 

vi q <v<v\ q (9) 

for 1 < q < m. 

Since we are assuming that rl < rl, there exists a unique p, with 0 < p < m, 
such that 

rh- P = rl h .. p (10) 
rl p+ i < rl p+ i (11) 

From (11) we have 

rlV, <rli p+] (12) 

Applying part (a) of the lemma to c l h .. p with i p+x substituted for i and p substituted 
for m, and part (b) to cl\... p with j p+x substituted for i and p substituted for m, we 
obtain 

rh...p < ci 1 ;::; 1 (i3) 

rlx... P > cl [ t:; ] (14) 
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Reader 
rl := cl; 

r2 := c2 ; 
if rl = rl 
then return r 1 

else p := max{/ : rl^.., = r2i...,-}; 

return any value in [r 1 tp+i, r2 ^+i] 

fi 

Figure 1 : The Monotonic-Clock Algorithm 

Since i p+1 < j p+1 by (6), monotonicity implies that cl [ '* +l] < c2 u ' +l] , so c\\ p ? p < 
c2 [ ^ ] . Hence, (10), (13), and (14) imply 

rl h .. p — cl h .. p —cl h .. p —rl h .. p 
By (4) and (5), this implies 

Combining (9), (15), (16), and (12) yields 

cl^+il < c i[«, + i] ^ +1 = rl tp+i < r2i p+] = c2 u »+ ,] i p+] < c2 lj " +li 

Hence, the reader can return any value in the interval [rl f^+i, r2 i p+i ]. 

The algorithm that has just been derived is shown in Figure 1 , where an arrow over a 
variable name means that the corresponding read or write is performed left-to-right 
or right-to-left, as indicated by the arrow's direction. Note that it does not matter 
how the writer reads c2, since it is the only process that changes c2. 

As a final optimization, observe that the reader reads c\ m immediately before 
reading c2 m , while the writer writes c2 m immediately before writing cl m . The 
algorithm remains correct if the two reads or writes are performed as a single 
operation. Hence, the two digits cl m and c2 m can be implemented by the same 
digit, which is read and written just once. In the most common application, m = 2 
and reading or writing the clock requires only three single-digit reads or writes. A 
version of the algorithm for a two-digit clock is shown in Figure 2. A clock value 
is a pair (/, r) where / is the left digit and r the right digit, and 0 is assumed to be 
the smallest possible right digit. 



Writer 

c5 := any value > c2; 
cl :=c2 



-i Up+i] 



= r2 h . 



P +\ 



(15) 
(16) 
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Reader 



Writer 



vl :=Z1; 



(/', r') :=any value > (12, r); 



v2 := 12; 

if vl — v2 then return (v2, w) 



w :- r; 



12 := /'; 
r :- r'\ 
11 := V 



else return (v2, 0) 

li 



Figure 2: A Two-Digit Monotonic-Clock Algorithm 



4 A Cyclic Clock 



A cyclic clock c is a data item that can assume any sequence of values. A write 
that decreases the value of c is said to cycle c. The cycling of c is interpreted to 
mean that c has "passed midnight". For notational convenience, assume that 0 is 
the smallest value c can assume. 

We can convert a cyclic clock c to a monotonic clock c by adding a fictitious left- 
hand part that is incremented whenever the value of c is decreased. The correctness 
condition for c is that the value returned by a read is the right-hand part of a correct 
value for a read of c. Thus, if c is cycled during the read, then the read may return 
the value 0. If c is cycled twice during the read, then the read may return any value. 

To construct an algorithm for implementing an m -digit cyclic clock c — C\ • ■ ■ c m , 
we first augment c to an m + 1 -digit cyclic clock c by adding an extra left-most 
binary digit c 0 , so c = c 0 • • -c m . The left-most bit c 0 of c is thus incremented 
(complemented) whenever the clock c is cycled. The digits c 0 , . . . , c m are assumed 
to be regular. 

The reads and writes of c are performed as in the monotonic-clock algorithm, so 
the writer begins by writing c2 0 and ends by writing c 1 0 , while the reader reads cl 0 
first and c2 0 last. If the reader finds cl 0 ^ c2 Q , then the read overlapped a write 
that cycled c, so the read can return the value 0. If the reader finds cl 0 = c2 Q , then 
either c was not cycled during the read or else it was cycled two or more times. 
In the first case, the monotonic-clock algorithm returns a correct value because it 
returns the value it would have obtained had it seen the entire fictitious clock c; in 
the second case, the read is permitted to return any value. Hence, in either case, 
the (right-most m digits of the) value obtained by the monotonic-clock algorithm 
is correct. 

The reader should be suspicious of this kind of informal argument because it often 
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leads to errors. However, since I know of no practical application of the cyclic- 
clock algorithm, I will leave its precise statement and rigorous correctness proof to 
the reader. 
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